Analysis
-
max time kernel
111s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 06:02
General
-
Target
Trojan.Win32.CoreWarrior.DA.exe
-
Size
83KB
-
MD5
c5fd88a407660a898f66d31242b2f3e0
-
SHA1
95d26d8309e6e3f3cb5b64fc00685d8253324361
-
SHA256
dd5d9bb24ef7657c4fc1a22b383e09f301d8fcbfe87203244c6e56dbae71d0dc
-
SHA512
aefc1cc66675d283168848822766a5e3efda15005f7763e5ed9385369ab64858c5e05d15b2dda516291ece1a6d134b83ff0a99122161751c1835bc170ff6415a
-
SSDEEP
1536:LJaPJpAz869DUxWB+i4OQ4NR2Kk+aSnfZaG8fcaOCzGquSE0cF+YK:LJ0TAz6Mte4A+aaZx8EnCGVuY
Malware Config
Signatures
-
UPX packed file 7 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.CoreWarrior.DA.exe"C:\Users\Admin\AppData\Local\Temp\Trojan.Win32.CoreWarrior.DA.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
83KB
MD50ae176569e99ed03cf4c4961852d1447
SHA1c5b6bf846c05176272b12d873b49dbf184016c09
SHA25659fcde3eed324cab52a440a879f54f304ece11545968603d794946b75c61221e
SHA5127d17489ed953c5b54eba1c7b24f7d039fb97da972d5062dc8ec26a259c7ce2e27ac0287e73f241c01cc821e4ad7c4e3aa6b92f38d641c57a030c44d11a06ea14
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB
-
Filesize
168KB